Sun OpenSolaris Process File System Local Code Execution Vulnerability

Bugtraq ID:	33654
Class:	Unknown
CVE:	CVE-2009-0477
Remote:	No
Local:	Yes
Published:	Feb 05 2009 12:00AM
Updated:	Apr 13 2015 09:11PM
Credit:	Sun
Vulnerable:	Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_100
Not Vulnerable:	Sun OpenSolaris build snv_101a

Sun OpenSolaris Process File System Local Code Execution Vulnerability

Sun OpenSolaris is prone to a local code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code with superuser privileges or cause a denial-of-service condition. Successful exploits may result in a complete compromise of the affected system.

This issue affects OpenSolaris based on builds snv_85 through snv_100.

Sun OpenSolaris Process File System Local Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun OpenSolaris Process File System Local Code Execution Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for more information.

Sun OpenSolaris Process File System Local Code Execution Vulnerability

References:

• Sun Solaris Homepage (Sun Microsystems)
  
• Security Vulnerability in the Process File System (proc(4)) Relating to Contract (Sun)